https://community.splunk.com/t5/Security/Help-with-behavioral-anomaly-detection/m-p/86533#M14156 <P>My company is developing a predictive analytics splunk app that does automatic anomaly detection. It will be on splunkbase in the next month or so and we're looking for beta customers. So far, early buzz is telling us that it's a killer app because it uses machine intelligence algorithms to automatically find anomalies.</P> <P>Interested in joining our <A href="http://prelert.com/products/predictive-analytics-splunk-beta.html">beta</A>? </P> Mon, 03 Sep 2012 15:58:59 GMT richcollier 2012-09-03T15:58:59Z https://community.splunk.com/t5/Security/Help-with-behavioral-anomaly-detection/m-p/86532#M14155 <P>Our company provides a SaaS platform for our customers to manage marketing campaigns across a variety of channels. We are constantly targeted by hackers who either try and steal our customers' email lists or send spam out through their account.</P> <P>We log all of the actions taken by users in their account. I'm not much of a quant guy, so I'd love to hear some feedback on how best to look for anomalous behavior. I could create a lookup table to save the average and standard deviation of actions by username. But I also see that there might be options using the transaction and anomalies commands.</P> <P>Has anyone successfully implemented something like this before and what approach did you take?</P> <P>Thx.</P> <P>C</P> Thu, 28 Jun 2012 17:55:48 GMT https://community.splunk.com/t5/Security/Help-with-behavioral-anomaly-detection/m-p/86532#M14155 responsys_cm 2012-06-28T17:55:48Z https://community.splunk.com/t5/Security/Help-with-behavioral-anomaly-detection/m-p/86533#M14156 <P>My company is developing a predictive analytics splunk app that does automatic anomaly detection. It will be on splunkbase in the next month or so and we're looking for beta customers. So far, early buzz is telling us that it's a killer app because it uses machine intelligence algorithms to automatically find anomalies.</P> <P>Interested in joining our <A href="http://prelert.com/products/predictive-analytics-splunk-beta.html">beta</A>? </P> Mon, 03 Sep 2012 15:58:59 GMT https://community.splunk.com/t5/Security/Help-with-behavioral-anomaly-detection/m-p/86533#M14156 richcollier 2012-09-03T15:58:59Z